# x402 Tools

> Pay-per-call research tools for AI agents, paid via x402 USDC. Remote MCP, one free tool.

- name: io.github.foxxx009/x402-tools-mcp
- version: 1.1.0
- connection class: R0 (autonomous)
- trust: 94/100
- quality: 73/100 (needs work)
- owner: not claimed
- descriptor: https://api.protogrid.dev/v1/servers/io.github.foxxx009%2Fx402-tools-mcp
- tools: https://api.protogrid.dev/v1/servers/io.github.foxxx009%2Fx402-tools-mcp/tools

**An agent can connect right now, no human step.** Remote endpoint, no authentication, reachable on the last probe.

## Connection (mcpServers)

```json
{
  "mcpServers": {
    "x402-tools-mcp": {
      "type": "http",
      "url": "https://fitze-x402-seller.app.workbuddy.host/mcp"
    }
  }
}
```


## Trust

- hygiene: 100
- liveness: 99
- freshness: 100
- provenance: 80
- drivers: +repository +namespace-matches-repo +reachable +uptime-96% +updated-28d-ago
- Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed.

## Quality 73/100 (needs work)

### protocol: 75 (weight 25)

- warn `protocol.modern`: newest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
- n/a `protocol.stateless`: only applies to 2026-07-28 servers
- pass `protocol.transport`: streamable HTTP
- n/a `protocol.list_ttl`: only applies to 2026-07-28 servers

### authorization: n/a (weight 15)

- n/a `auth.prm`, `auth.as_metadata`, `auth.cimd`: no remote uses OAuth
- n/a `auth.secret_in_url`: no templated URL

### tool hygiene: 71 (weight 30)

- pass `tools.descriptions`: every tool has a description
- pass `tools.description_length`: descriptions are concise
- pass `tools.schemas`: every tool has an object input schema
- fail `tools.annotations`: no tool declares readOnlyHint or destructiveHint, so clients cannot tell safe calls from risky ones
- fail `tools.directory_hints`: no tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: token_intel (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); web_brief (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); stock_quote (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); …
- pass `tools.token_cost`: about 1,460 tokens to load every tool
- pass `tools.api_dump`: tools are not a one-to-one API dump

### stability: 75 (weight 15)

- warn `stability.changes`: 42 tool changes in 30 days
- pass `stability.rug_pull`: no tool changed its meaning under the same name

### dependencies: n/a (weight 15)

- n/a `deps.known_vulns`, `deps.mcp_sdk_version`, `deps.resolvable`: no npm or PyPI package

- tools: 13, about 1,460 tokens to load them all
- tool set hash: 3e67b26b8c56f8ba7292507388d405dd
- tools last changed: 2026-10-03T22:51:35.751Z
- badge: [![protogrid quality](https://protogrid.dev/badge/io.github.foxxx009/x402-tools-mcp.svg)](https://protogrid.dev/servers/io.github.foxxx009/x402-tools-mcp)
- Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed.

### Tool changes

- 2026-10-03 `fda_recalls` changed (description)
  - before: $0.05 per call — FDA recall enforcement reports from open.fda.gov (no key, rate-limited). Params: type = food|drug|device (default food); reason = free-text filter; limit = max records (default 10). Returns recall reason, status, date and product description for each match.
  - after: $0.02 per call — FDA recall enforcement reports from open.fda.gov (no key, rate-limited). Params: type = food|drug|device (default food); reason = free-text filter; limit = max records (default 10). Returns recall reason, status, date and product description for each match.
- 2026-10-03 `sec_edgar_search` changed (description)
  - before: $0.05 per call — SEC EDGAR full-text search (efts.sec.gov, no key). Find filings by term. Params: q = search term (required); forms = comma list e.g. 10-K,8-K; limit = max hits (default 10). Returns filing date, company, CIK and accession number for each hit.
  - after: $0.02 per call — SEC EDGAR full-text search (efts.sec.gov, no key). Find filings by term. Params: q = search term (required); forms = comma list e.g. 10-K,8-K; limit = max hits (default 10). Returns filing date, company, CIK and accession number for each hit.
- 2026-10-03 `exchange_rates` changed (description)
  - before: $0.005 per call — Live fiat exchange rates (open.er-api.com, no key, ~200 currencies). Params: base = ISO code (default USD); to = comma list or single code (default EUR,GBP,JPY,CNY). Returns rates and the last-update timestamp.
  - after: $0.002 per call — Live fiat exchange rates (open.er-api.com, no key, ~200 currencies). Params: base = ISO code (default USD); to = comma list or single code (default EUR,GBP,JPY,CNY). Returns rates and the last-update timestamp.
- 2026-10-03 `open_meteo_weather` changed (description)
  - before: $0.005 per call — Current weather from Open-Meteo (no API key, no signup). Given lat/lon returns temperature (C), apparent temperature, humidity, wind speed, precipitation and a WMO weather code. Params: lat, lon (required).
  - after: $0.002 per call — Current weather from Open-Meteo (no API key, no signup). Given lat/lon returns temperature (C), apparent temperature, humidity, wind speed, precipitation and a WMO weather code. Params: lat, lon (required).
- 2026-10-03 `usgs_earthquakes` changed (description)
  - before: $0.005 per call — Recent earthquakes from the USGS GeoJSON feed (no API key). Returns magnitude, place, time, depth and coordinates for each event. Params: period = hour|day|week (default day); minmag = minimum magnitude (default 0); limit = max events (default 20).
  - after: $0.002 per call — Recent earthquakes from the USGS GeoJSON feed (no API key). Returns magnitude, place, time, depth and coordinates for each event. Params: period = hour|day|week (default day); minmag = minimum magnitude (default 0); limit = max events (default 20).
- 2026-10-03 `web_brief` changed (description)
  - before: $0.05 per call — Multi-source research brief from 1–3 URLs. For each source extract title, meta description, key sentences (numbered/quoted/date-or-figure-bearing) and outbound links. Returns a structured, citable brief other agents can consume without their own web access.
  - after: $0.02 per call — Multi-source research brief from 1–3 URLs. For each source extract title, meta description, key sentences (numbered/quoted/date-or-figure-bearing) and outbound links. Returns a structured, citable brief other agents can consume without their own web access.
- 2026-10-03 `repo_diligence` changed (description)
  - before: $0.25 per call — Deep GitHub repo due-diligence: base snapshot + last 5 commits (author/date/message), contributor count, archived flag, security-policy presence, latest release cadence and open/closed issue ratio. Use to decide whether to depend on or contribute to a repo before trusting it.
  - after: $0.03 per call — Deep GitHub repo due-diligence: base snapshot + last 5 commits (author/date/message), contributor count, archived flag, security-policy presence, latest release cadence and open/closed issue ratio. Use to decide whether to depend on or contribute to a repo before trusting it.
- 2026-10-03 `token_intel` changed (description)
  - before: $0.01 per call — Base ERC-20 due-diligence: on-chain name, symbol, decimals and total supply via eth_call. Use to sanity-check a Base token address before interacting with it.
  - after: $0.005 per call — Base ERC-20 due-diligence: on-chain name, symbol, decimals and total supply via eth_call. Use to sanity-check a Base token address before interacting with it.
- 2026-10-03 `github_repo` changed (description)
  - before: $0.01 per call — GitHub repo snapshot: stars, forks, open-issue count, watchers, primary language, SPDX license, created/pushed dates and latest release tag. Use to triage a repo before contributing or depending on it.
  - after: $0.005 per call — GitHub repo snapshot: stars, forks, open-issue count, watchers, primary language, SPDX license, created/pushed dates and latest release tag. Use to triage a repo before contributing or depending on it.
- 2026-10-03 `domain_intel` changed (description)
  - before: $0.01 per call — Domain due-diligence bundle: RDAP registrar + creation/expiry dates + status, DNS records (A/MX/NS/TXT), and Certificate Transparency history via crt.sh. Use to vet a domain before trusting or linking to it.
  - after: $0.005 per call — Domain due-diligence bundle: RDAP registrar + creation/expiry dates + status, DNS records (A/MX/NS/TXT), and Certificate Transparency history via crt.sh. Use to vet a domain before trusting or linking to it.

Full history: https://api.protogrid.dev/v1/servers/io.github.foxxx009%2Fx402-tools-mcp/changes

## Remotes

- https://fitze-x402-seller.app.workbuddy.host/mcp (streamable-http, auth none, reachable true, uptime30d 0.96363634)

## Packages

_none_

## Tools (13)

- `domain_intel`: $0.005 per call — Domain due-diligence bundle: RDAP registrar + creation/expiry dates + status, DNS records (A/MX/NS/TXT), and Certificate Transparency history via crt.sh. Use to vet a domain before trusting or linking to it.
- `exchange_rates`: $0.002 per call — Live fiat exchange rates (open.er-api.com, no key, ~200 currencies). Params: base = ISO code (default USD); to = comma list or single code (default EUR,GBP,JPY,CNY). Returns rates and the last-update timestamp.
- `fda_recalls`: $0.02 per call — FDA recall enforcement reports from open.fda.gov (no key, rate-limited). Params: type = food|drug|device (default food); reason = free-text filter; limit = max records (default 10). Returns recall reason, status, date and product description for each match.
- `free_url_check`: FREE — FREE: check whether a public URL is reachable and what it is. Returns HTTP status, final URL after redirects, content type and page title. Use web_fetch (paid) for full text and links.
- `github_repo`: $0.005 per call — GitHub repo snapshot: stars, forks, open-issue count, watchers, primary language, SPDX license, created/pushed dates and latest release tag. Use to triage a repo before contributing or depending on it.
- `open_meteo_weather`: $0.002 per call — Current weather from Open-Meteo (no API key, no signup). Given lat/lon returns temperature (C), apparent temperature, humidity, wind speed, precipitation and a WMO weather code. Params: lat, lon (required).
- `repo_diligence`: $0.03 per call — Deep GitHub repo due-diligence: base snapshot + last 5 commits (author/date/message), contributor count, archived flag, security-policy presence, latest release cadence and open/closed issue ratio. Use to decide whether to depend on or contribute to a repo before trusting it.
- `sec_edgar_search`: $0.02 per call — SEC EDGAR full-text search (efts.sec.gov, no key). Find filings by term. Params: q = search term (required); forms = comma list e.g. 10-K,8-K; limit = max hits (default 10). Returns filing date, company, CIK and accession number for each hit.
- `stock_quote`: $0.01 per call — Real-time stock quotes: price, change, change percent, open, high, low, volume, turnover, currency and exchange timestamp. Covers A-shares (sh600000, sz000001), Hong Kong (hk00700) and US (usAAPL or plain AAPL). Accepts several symbols at once separated by commas. No API key needed, sourced from Tencent qt.gtimg.cn with a Nasdaq fallback for US tickers.
- `token_intel`: $0.005 per call — Base ERC-20 due-diligence: on-chain name, symbol, decimals and total supply via eth_call. Use to sanity-check a Base token address before interacting with it.
- `usgs_earthquakes`: $0.002 per call — Recent earthquakes from the USGS GeoJSON feed (no API key). Returns magnitude, place, time, depth and coordinates for each event. Params: period = hour|day|week (default day); minmag = minimum magnitude (default 0); limit = max events (default 20).
- `web_brief`: $0.02 per call — Multi-source research brief from 1–3 URLs. For each source extract title, meta description, key sentences (numbered/quoted/date-or-figure-bearing) and outbound links. Returns a structured, citable brief other agents can consume without their own web access.
- `web_fetch`: $0.005 per call — Fetch a public URL and return status, final URL, title, cleaned text (scripts/styles stripped, truncated) and the top 20 absolute links. Useful when an agent itself cannot reach the open web.